SECURITY: Do checks on all upload types

Also, verify file before stashing it

Change-Id: Ib2474cb778d53959a4f479e53d0392f916b18d83